Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa
File:                     323830343a363631343a3a2f33332d3333203d3e20323639353332.roa (raw, json)
Hash identifier:          IOSpUXuaA+59zlibpUkRoQOAUhK95EhjqgmL3u2vdV0=
Subject key identifier:   4E:8F:64:11:FA:99:89:19:20:5A:53:80:D3:37:DB:EC:54:1F:C0:16
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       0DED8523D28803798FAE81D43B27CDEF548B5C80
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     269532
IP address blocks:        2804:6614::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ed:85:23:d2:88:03:79:8f:ae:81:d4:3b:27:cd:ef:54:8b:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:88:b1:8e:71:75:5d:4b:54:62:ad:ae:3f:
                    3a:51:d5:51:5d:83:d4:ac:1d:9f:ce:02:b3:71:2c:
                    90:01:43:17:d8:b6:34:e1:b2:fe:5c:7e:a3:d9:50:
                    9b:5e:c7:d3:56:ab:17:3c:5c:27:a2:0d:20:7d:89:
                    1c:b5:1e:d8:41:bc:21:73:e3:22:82:55:9b:a3:81:
                    8d:93:2e:3c:18:59:e0:81:2d:1e:db:1c:35:20:b2:
                    1a:42:6a:c5:9e:d4:11:b7:13:52:36:eb:11:50:c6:
                    84:a5:8c:bd:ec:5d:9a:ac:63:52:f4:2d:c2:7e:23:
                    53:8a:77:82:58:54:58:31:c2:4d:f0:fa:15:8f:68:
                    e3:2b:c0:4f:05:c0:01:64:86:27:11:b8:3f:7d:57:
                    da:a5:87:23:1f:5b:c7:1f:15:3f:2a:44:3f:72:6c:
                    e3:c0:f4:53:c6:07:ec:58:a3:3e:10:50:f0:51:e6:
                    18:7d:3c:4f:cd:36:46:01:c0:61:6e:4d:09:0d:17:
                    7a:09:10:d3:ee:3a:e4:78:e7:64:a0:ed:ea:e1:3d:
                    76:34:ad:03:ff:b6:fa:e8:49:b7:70:26:6e:35:aa:
                    d6:d0:9e:f7:b9:df:12:af:d8:c5:ad:2d:1b:6d:0c:
                    79:65:33:d6:2e:45:e2:18:d8:d8:4f:86:f8:0c:2f:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8F:64:11:FA:99:89:19:20:5A:53:80:D3:37:DB:EC:54:1F:C0:16
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:9f:77:42:8a:b9:a5:2a:8f:1a:51:76:61:df:2d:c1:21:2a:
         97:73:71:31:bd:a6:3d:c6:5c:ac:cf:90:5d:46:81:fc:c1:cc:
         fb:8a:a8:5f:ab:c7:20:cb:ad:ef:1b:84:ac:c7:f9:5f:9d:99:
         d2:af:6d:d5:08:03:96:a7:4e:50:d3:a6:78:79:e2:ca:84:3b:
         d8:38:db:8a:f5:0a:12:90:75:9e:5b:f2:fc:f8:9a:1d:39:7f:
         4e:b6:38:c0:a8:97:0f:7c:cf:69:5b:be:90:40:f2:21:c4:5a:
         a9:1f:bc:ad:8c:44:1a:5f:18:fc:4d:17:f4:f3:fa:c5:71:f6:
         82:f6:f4:71:ba:9a:42:cc:89:9b:3f:6c:89:12:00:4b:56:e9:
         56:a0:7f:0f:27:a3:7b:ae:22:0b:3c:6a:41:d5:f9:b8:2e:d8:
         4b:99:b3:d7:f3:6d:36:51:29:00:13:5a:79:41:08:00:11:3a:
         12:c7:5e:4d:d3:00:f1:7c:09:22:bc:2f:ee:92:0d:6c:c4:db:
         10:76:17:30:cf:49:21:7c:e4:40:16:1c:cb:9d:b9:27:ab:67:
         5b:f7:75:3c:74:22:d4:41:59:9a:e4:cd:98:d7:41:eb:b6:f5:
         36:db:d9:15:df:23:6d:e9:20:9f:33:f7:fc:d1:f2:f1:d3:4d:
         22:b5:c5:35
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDe2FI9KIA3mProHUOyfN71SLXIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM5NzZCRkMwOThFMDREOTNBNTUwN0JCQjA0NkMzNjA4
Qjg4OTY3MDAeFw0yNDA0MDMxODI2MzNaFw0yNTA0MDIxODMxMzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRURCODg4QjE4RTcxNzU1RDRC
NTQ2MkFEQUUzRjNBNTFENTUxNUQ4M0Q0QUMxRDlGQ0UwMkIzNzEyQzkwMDE0MzE3
RDhCNjM0RTFCMkZFNUM3RUEzRDk1MDlCNUVDN0QzNTZBQjE3M0M1QzI3QTIwRDIw
N0Q4OTFDQjUxRUQ4NDFCQzIxNzNFMzIyODI1NTlCQTM4MThEOTMyRTNDMTg1OUUw
ODEyRDFFREIxQzM1MjBCMjFBNDI2QUM1OUVENDExQjcxMzUyMzZFQjExNTBDNjg0
QTU4Q0JERUM1RDlBQUM2MzUyRjQyREMyN0UyMzUzOEE3NzgyNTg1NDU4MzFDMjRE
RjBGQTE1OEY2OEUzMkJDMDRGMDVDMDAxNjQ4NjI3MTFCODNGN0Q1N0RBQTU4NzIz
MUY1QkM3MUYxNTNGMkE0NDNGNzI2Q0UzQzBGNDUzQzYwN0VDNThBMzNFMTA1MEYw
NTFFNjE4N0QzQzRGQ0QzNjQ2MDFDMDYxNkU0RDA5MEQxNzdBMDkxMEQzRUUzQUU0
NzhFNzY0QTBFREVBRTEzRDc2MzRBRDAzRkZCNkZBRTg0OUI3NzAyNjZFMzVBQUQ2
RDA5RUY3QjlERjEyQUZEOEM1QUQyRDFCNkQwQzc5NjUzM0Q2MkU0NUUyMThEOEQ4
NEY4NkY4MEMyRjJDOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7biIsY5xdV1LVGKtrj86UdVRXYPUrB2fzgKzcSyQAUMX2LY04bL+
XH6j2VCbXsfTVqsXPFwnog0gfYkctR7YQbwhc+MiglWbo4GNky48GFnggS0e2xw1
ILIaQmrFntQRtxNSNusRUMaEpYy97F2arGNS9C3CfiNTineCWFRYMcJN8PoVj2jj
K8BPBcABZIYnEbg/fVfapYcjH1vHHxU/KkQ/cmzjwPRTxgfsWKM+EFDwUeYYfTxP
zTZGAcBhbk0JDRd6CRDT7jrkeOdkoO3q4T12NK0D/7b66Em3cCZuNarW0J73ud8S
r9jFrS0bbQx5ZTPWLkXiGNjYT4b4DC8sjwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FE6PZBH6mYkZIFpTgNM32+xUH8AWMB8GA1UdIwQYMBaAFMOXa/wJjgTZOlUHu7BG
w2CLiJZwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FLVmJiMU1OU0w4UkFy
ZWdBYzNNa1dzZ01rdzdmSzJGYkV6a0RmU3drOE4yLzEvQzM5NzZCRkMwOThFMDRE
OTNBNTUwN0JCQjA0NkMzNjA4Qjg4OTY3MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DMzk3NkJGQzA5OEUwNEQ5M0E1NTA3QkJCMDQ2QzM2MDhCODg5
NjcwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BS1ZiYjFNTlNMOFJBcmVnQWMz
TWtXc2dNa3c3ZksyRmJFemtEZlN3azhOMi8xLzMyMzgzMDM0M2EzNjM2MzEzNDNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzOTM1MzMzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
ZhQAMA0GCSqGSIb3DQEBCwUAA4IBAQCFn3dCirmlKo8aUXZh3y3BISqXc3ExvaY9
xlysz5BdRoH8wcz7iqhfq8cgy63vG4Ssx/lfnZnSr23VCAOWp05Q06Z4eeLKhDvY
ONuK9QoSkHWeW/L8+JodOX9OtjjAqJcPfM9pW76QQPIhxFqpH7ytjEQaXxj8TRf0
8/rFcfaC9vRxuppCzImbP2yJEgBLVulWoH8PJ6N7riILPGpB1fm4LthLmbPX8202
USkAE1p5QQgAEToSx15N0wDxfAkivC/ukg1sxNsQdhcwz0khfORAFhzLnbknq2db
93U8dCLUQVma5M2Y10HrtvU229kV3yNt6SCfM/f80fLx000itcU1
-----END CERTIFICATE-----
Generated at Thu Jun 27 11:22:57 2024 by rpki-client on console-fra.rpki-client.org